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Claims 

What is claimed is: 

1 . A method of securely supporting password change comprising the steps of: 
detecting an occurrence of a password change operation in execution on a system; 
detecting the new password when provided; and, 

storing data indicative of the new password in a database other than the password 
database associated with the password change operation for later retrieval, the data indicative of 
the new password for use in providing the new password provision to the system automatically. 

2. A method of securely supporting password change according to claim 1 wherein the step 
of detecting an occurrence of a change of password operation in execution on a system 
comprises the step of detecting a new password prompt. 

3. A method of securely supporting password change according to claim 1 comprising the 
steps of: 

prompting a user to provide authorization data; and, 
associating the authorization data with the password. 

4. A method of securely supporting password change according to claim 1 , wherein the step 
of detecting the new password comprises the step of detecting the new password at least two 
separate times. 

5. A method of securely supporting password change comprising the steps of: 
detecting a change password operation in execution on a system; 

displaying to a user a prompt for a new password, the prompt independent of the 
password change operation; 

receiving the new password; 

performing an operation to change the password to the new password in the system; and, 
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storing the new password in a database independent of the change password operation 
and of the database where the changed password is stored by the change password operation. 

6. A method of securely supporting password change according to claim 5 wherein the step 
of detecting the change password operation in execution on a system comprises the step of 
detecting password change command options. 

7. A method of securely supporting password change comprising the steps of: 
detecting a password change operation in execution on a system; 

displaying to a user a prompt for authentication information, the prompt independent of 
the password change operation; 

receiving the authentication information; 

when the authentication information is indicative of a known user, performing an 
operation to change the password of the known user to a new password in the system; and, 

storing the new password in a database independent of the change password operation 
and of the database where the changed password is stored. 

8. A method of securely supporting password change according to claim 7 wherein the 
prompt for authentication information a prompt for biometric information. 

9. A method of securely supporting password change according to claim 8 comprising the 
step of: 

providing biometric information; 

processing the provided biometric information to provide biometric data; 
comparing the biometric data with a stored template; and 

in dependence upon a comparison result retrieving a user password from a database. 

10. A method of securely supporting password change according to claim 7 wherein the 
prompt for authentication information a prompt for information stored on a smart card. 
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11. A method of securely supporting password change according to claim 7 wherein the step 
of performing an operation to change the password comprises the step of providing the new 
password to the system. 

12. A method of securely supporting password change according to claim 7 wherein the step 
of performing an operation to change the password comprises the step of prompting the user to 
select between provision of the new password and automatic generation of the new password. 

13. A method of securely supporting password change according to claim 12 wherein the 
step of performing an operation to change the password comprises the step of automatically 
generating the new password. 

14. A method of securely supporting password change according to claim 7 wherein the step 
of performing an operation to change the password comprises the step of automatically 
generating the new password. 

15. A method of securely supporting password change according to claim 1 3 wherein the 
automatically generated new password is unknown to the user. 

16. A method of securely supporting password change according to claim 15 wherein the 
automatically generated new password is an encryption key. 

17. A method of securely supporting password change according to claim 16 wherein data 
secured with the new password is encrypted using the encryption key. 

18. A method of securely supporting password change according to claim 7 comprising the step 
of: 

performing another operation to change another password of the known user to the new 
password. 
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19. A method of securely supporting password change according to claim 7 comprising the step 
of: 

determining all passwords identical to the password being changed and automatically 
performing at least another operation to change each identical password of the known user to the 
new password. 

20. A method of securely supporting password change comprising the steps of: 
detecting a password change operation in execution on a system having a known user 

authorized thereon; 

automatically generated a new password; 

performing an operation to change the password to a new password in the system; and, 
storing the new password in a database independent of the change password operation 
and of the database where the changed password is stored. 

21. A method of securely supporting password change according to claim 20 wherein the 
automatically generated new password is unknown to the user. 

22. A method of securely supporting password change according to claim 2 1 wherein the 
automatically generated new password is an encryption key. 

23. A method of securely supporting password change according to claim 22 wherein data 
secured with the new password is encrypted using the encryption key. 
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